9:41 a.m.
https://bugzilla.redhat.com/show_bug.cgi?id=1795038
Bug ID: 1795038
Summary: Java/Eclipse packages (e.g. glassfish-jsp) are not
being updated
Product: Fedora
Version: 31
Status: NEW
Component: eclipse
Assignee: mat.booth(a)redhat.com
Reporter: jan.public(a)famvlug.nl
QA Contact: extras-qa(a)fedoraproject.org
CC: akurtako(a)redhat.com, andjrobins(a)gmail.com,
dbhole(a)redhat.com, ebaron(a)fedoraproject.org,
eclipse-sig(a)lists.fedoraproject.org,
jerboaa(a)gmail.com, jjohnstn(a)redhat.com,
lef(a)fedoraproject.org, mat.booth(a)redhat.com,
rgrunber(a)redhat.com
Target Milestone: ---
Classification: Fedora
I have been using my system since many Fedora versions, and I always upgrade
Fedora when there is a new release.
It is possible that I have been fidling with my system to get Eclipse working.
At the moment, it seems that I have a modular Eclipse package:
# dnf list installed | grep eclipse-platform
eclipse-platform.x86_64
1:4.13-6.module_f31+7243+50fb5b11 @updates-modular
My system is fully up to date:
# dnf update
Last metadata expiration check: 2:19:18 ago on Sun 26 Jan 2020 14:03:38 CET.
Dependencies resolved.
Nothing to do.
Complete!
However according to dnf updateinfo info there are updates available:
[root@rainbowdash ~]# dnf updateinfo info
Last metadata expiration check: 2:19:53 ago on Sun 26 Jan 2020 14:03:38 CET.
===============================================================================
apache-commons-compress-1.19-1.fc31
===============================================================================
Update ID: FEDORA-2019-da0eac1eb6
Type: security
Updated: 2020-01-25 06:59:21
Bugs: 1761797 - CVE-2019-12402 apache-commons-compress: denial of
service vulnerability
Description: Update to version 1.19.
:
: Resolves CVE-2019-12402.
Severity: Important
===============================================================================
eclipse-m2e-workspace-0.4.0-13.fc31
===============================================================================
Update ID: FEDORA-2019-d3d3a793c2
Type: enhancement
Updated: 2020-01-25 06:54:44
Description: Fix build to avoid takari-* stack
Severity: Low
===============================================================================
glassfish-hk2-2.5.0-5.fc31
===============================================================================
Update ID: FEDORA-2019-a0e393f792
Type: bugfix
Updated: 2020-01-25 06:59:52
Bugs: 1735263 - glassfish-hk2: FTBFS in Fedora rawhide/f31
Description: Rebuild with reduced dependency set to fix FTBFS on fedora 31+.
Severity: None
===============================================================================
glassfish-jsp-2.3.4-2.fc31 takari-polyglot-0.4.4-5.fc31
===============================================================================
Update ID: FEDORA-2019-45dcf79c41
Type: enhancement
Updated: 2020-01-04 21:32:10
Description: Unretirement of glassfish-jsp and takari-polyglot.
:
Severity: Low
===============================================================================
jackson-annotations-2.10.0-1.fc31 jackson-bom-2.10.0-1.fc31
jackson-core-2.10.0-1.fc31 jackson-databind-2.10.0-1.fc31
jackson-parent-2.10-1.fc31
===============================================================================
Update ID: FEDORA-2019-cf87377f5f
Type: security
Updated: 2020-01-25 06:58:04
Bugs: 1755832 - CVE-2019-16335 jackson-databind: polymorphic typing
issue related to com.zaxxer.hikari.HikariDataSource [fedora-all]
: 1755850 - CVE-2019-14540 jackson-databind: polymorphic typing
issue related to com.zaxxer.hikari.HikariConfig [fedora-all]
: 1758168 - jackson-databind: Serialization gadgets in classes of
the ehcache package [fedora-all]
: 1758172 - jackson-databind: Serialization gadgets in classes of
the commons-configuration package [fedora-all]
: 1758183 - jackson-databind: Serialization gadgets in classes of
the xalan package [fedora-all]
: 1758188 - CVE-2019-16942 jackson-databind: Serialization gadgets
in classes of the commons-dbcp package [fedora-all]
: 1758193 - CVE-2019-16943 jackson-databind: Serialization gadgets
in classes of the p6spy package [fedora-all]
Description: - Update jackson-parent to version 2.10.
: - Update jackson-bom to version 2.10.0.
: - Update jackson-annotations to version 2.10.0.
: - Update jackson-core to version 2.10.0.
: - Update jackson-databind to version 2.10.0.
:
: Resolves CVE-2019-14540, CVE-2019-16335, CVE-2019-16942,
CVE-2019-16943.
Severity: Moderate
===============================================================================
jackson-dataformat-xml-2.10.0-1.fc31 jackson-jaxrs-providers-2.10.0-1.fc31
jackson-modules-base-2.10.0-1.fc31 stax2-api-4.2-1.fc31
woodstox-core-6.0.2-1.fc31
===============================================================================
Update ID: FEDORA-2019-12ea5e5227
Type: enhancement
Updated: 2020-01-25 06:57:05
Description: Update resteasy dependencies
Severity: None
===============================================================================
kernel-5.4.13-201.fc31
===============================================================================
Update ID: FEDORA-2020-aa144b34ed
Type: bugfix
Updated: 2020-01-25 06:59:26
Description: Update to Linux v5.4.13
Severity: None
===============================================================================
maven-3.5.4-13.fc31
===============================================================================
Update ID: FEDORA-2019-f3a7f84557
Type: bugfix
Updated: 2020-01-25 06:56:53
Bugs: 1767329 - postun scriplet failure
Description: Fix broken postun scriptlet.
Severity: None
===============================================================================
maven-osgi-0.2.0-18.fc31
===============================================================================
Update ID: FEDORA-2019-6ff5c442a3
Type: unknown
Updated: 2020-01-25 06:57:02
Description: Package un-retirement.
Severity: None
Note that glassfish-jsp-2.3.4-2.fc31 was already updated in the repository on
2020-01-04 21:32:10 according to the dnf updateinfo output.
Here for information the output of a few commands:
# dnf list installed | grep glassfish-jsp
glassfish-jsp.noarch
2.3.3-0.14.b02.module_f31+6793+1c93c38e @updates-modular
glassfish-jsp-api.noarch
2.3.3-1.module_f31+7243+50fb5b11 @updates-modular
# dnf module list | grep glassfish-jsp
<no results here>
# dnf install glassfish-jsp
Last metadata expiration check: 2:25:20 ago on Sun 26 Jan 2020 14:03:38 CET.
Package glassfish-jsp-2.3.3-0.14.b02.module_f31+6793+1c93c38e.noarch is already
installed.
Dependencies resolved.
Nothing to do.
Complete!
# dnf remove glassfish-jsp
This results in the removal of 134 packages, including eclipse modular. I did
not proceed with this removal.
Is there a problem with the unretirement of glassfish-jsp?
--
You are receiving this mail because:
You are on the CC list for the bug.